Securing Remote Authentication

In a computing environment a method of authenticating a secure session between a first user entity and an identity provider using a second user entity the method comprising:

• receiving a request for a session from an entity that purports to be the first user entity;
• sending authentication context from the request, and wherein the authentication context for the request arrives at the second user entity, to be used in verification of the authentication context using the second user entity;
• receiving an indication that the authentication context has been verified at the second user entity;
• and
• as a result, authenticating a secure session between a first user entity and an identity provider or approving a secure transaction.

In a computing environment a method of authenticating a secure session between a first user entity and an identity provider using a second user entity the method comprising:

• a user using a first entity requesting a secure session with the identity provider, wherein the request is associated with authentication context for the first entity;
• the user receiving from the second entity the authentication context of the first entity;
• and
• the user confirming that the authentication context from the first entity and second entity match according to some predetermined criteria.